diff --git a/crates/bunch/RUSTSEC-0000-0000.md b/crates/bunch/RUSTSEC-0000-0000.md index 87bf5b2..d7ea4a0 100644 --- a/crates/bunch/RUSTSEC-0000-0000.md +++ b/crates/bunch/RUSTSEC-0000-0000.md @@ -10,9 +10,9 @@ categories = ["memory-corruption"] patched = [] ``` -# `impl Sync for Bunch` needs a Sync bound on T +# Bunch unconditionally implements Send/Sync -Affected versions of this crate unconditionally implements `Sync` for `Bunch`. -This allows users to insert `T: !Sync` to `Bunch`. It is possible to create a data race to a `T: !Sync` by invoking the `Bunch::get()` API (which returns `&T`) from multiple threads. +Affected versions of this crate unconditionally implements `Send`/`Sync` for `Bunch`. +This allows users to insert `T: !Sync` to `Bunch`. It is possible to create a data race to a `T: !Sync` by invoking the `Bunch::get()` API (which returns `&T`) from multiple threads. It is also possible to send `T: !Send` to other threads by inserting `T` inside `Bunch` and sending `Bunch` to another thread, allowing to create a data race by inserting types like `T = Rc<_>`. Such data races can lead to memory corruption.